Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File:                     R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier:          7Z2wAVE/REnE0mgKKPRUTZFTWvqeFdspK2y0z4RUS+Y=
Subject key identifier:   C3:32:8D:7C:E9:BF:5B:1D:25:23:7F:11:B4:B5:45:8D:C5:50:3F:E6
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer:       /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial:       0196598250B19E0E27592EFA853BC42E0F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number:          0F4B
Signing time:             Mon 21 Apr 2025 18:00:34 +0000
Manifest this update:     Mon 21 Apr 2025 18:00:34 +0000
Manifest next update:     Tue 22 Apr 2025 18:00:34 +0000
Files and hashes:         1: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: GwrAJpm2KvCRzjgeG9MA78TrW9avzXBCFaeHBNk8alE=)
                          2: YwpFL-la1dCDFyOhJkDlnsbvc0E.roa (hash: 5Fts0SsJTbarORUPjAMAPXr3a1lfXPj9HBkPNFyTj4M=)
                          3: dEKlYH2cmj45z4x_T9UVuavDVhs.roa (hash: Ol+cnfARbBRUjhEvoMIs6jgxKtNHaBvPnq4IVRHSiu4=)
                          4: v05yfGi9C_17HLObMwDo5FEICGE.roa (hash: /OVS3c7m1p/c35QFzc0QWZFHRzFKrme9OTRuEH9/X8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:82:50:b1:9e:0e:27:59:2e:fa:85:3b:c4:2e:0f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
        Validity
            Not Before: Apr 21 18:00:34 2025 GMT
            Not After : Apr 22 18:00:34 2025 GMT
        Subject: CN=c3328d7ce9bf5b1d25237f11b4b5458dc5503fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:1f:b3:e5:75:97:fb:02:a4:99:64:99:17:
                    93:46:8c:4d:4e:d3:00:d7:b7:09:25:c7:8a:3e:0a:
                    55:da:1c:8f:36:e9:dd:ce:be:f9:c6:a3:63:71:87:
                    83:ed:0e:e3:d0:8f:4e:10:0d:1f:c2:fb:a2:87:15:
                    a6:4d:8a:72:f7:6d:46:3f:7a:db:19:5b:37:a3:59:
                    2d:7d:ce:7b:5d:7b:29:d3:9c:98:2f:26:e3:d4:4f:
                    2b:c1:fd:27:f8:8c:8a:ae:18:6a:4b:46:45:21:92:
                    7a:bc:4c:a5:66:56:bf:4b:fb:74:f3:88:f4:e5:c0:
                    a8:be:04:2a:59:29:ea:77:4d:4f:79:d3:7f:6f:c4:
                    9a:7c:69:53:88:80:6a:63:4e:06:4b:41:c0:cc:96:
                    b7:5b:37:55:ff:cc:f3:67:c2:c5:cd:94:30:c3:3c:
                    b5:1b:a0:1f:e6:69:98:ec:a9:b9:ad:d8:2a:9e:ce:
                    0e:e1:d7:d3:6f:78:48:9e:8c:bb:e5:45:30:89:c0:
                    41:c9:b9:07:17:15:7a:48:44:2d:4e:1a:9e:0e:32:
                    f0:2d:2f:45:7b:25:ee:14:00:1b:3b:e0:59:c9:53:
                    e3:f2:53:22:e6:3f:e8:ab:d6:2a:33:d7:25:24:aa:
                    25:a1:a5:81:fc:57:69:9a:3d:da:8e:ec:d0:ac:7d:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:32:8D:7C:E9:BF:5B:1D:25:23:7F:11:B4:B5:45:8D:C5:50:3F:E6
            X509v3 Authority Key Identifier:
                keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ac:f0:20:1c:41:6b:65:b6:e2:d8:e9:b8:08:e4:3c:7e:e1:
         f8:56:d1:30:6e:d0:a2:8c:a8:0c:81:5e:c0:5c:39:74:12:34:
         2c:4e:58:a5:0f:ab:e0:af:32:01:04:b2:f4:06:0e:9b:d6:ea:
         6f:ce:d6:a4:fe:a8:87:9c:0a:e5:69:13:14:20:39:ac:0c:d7:
         14:6a:eb:fb:5d:80:a6:b6:27:5e:be:a1:31:85:a8:f3:bc:1e:
         ab:6e:3b:6f:59:5f:e6:d3:cf:c5:40:61:0e:40:68:74:2a:fd:
         d0:d4:25:36:46:ee:ab:cb:c4:f1:81:0a:2d:41:7b:fb:c3:3a:
         af:d4:90:22:cd:9d:80:d5:53:7d:f2:49:3a:1a:91:34:0a:f0:
         8a:2f:85:79:4e:d9:a9:06:07:f7:3f:c6:42:13:6c:ec:53:25:
         81:a8:f1:93:df:39:dc:0e:0f:70:43:16:4b:37:aa:1c:fb:4d:
         9c:b4:64:26:f0:57:a5:6b:75:fc:9f:d7:6a:0f:21:6c:d1:51:
         fd:ab:a7:96:63:ec:ec:eb:56:d8:be:1f:f7:5b:47:d1:c3:6d:
         e6:cc:86:f4:c6:78:c8:fb:6e:9c:5b:04:de:82:c7:a2:d0:5a:
         aa:72:27:17:14:05:d9:19:5a:43:23:8a:c3:83:7d:fb:b5:1c:
         8f:2c:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:15:24 2025 by rpki-client